Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/19043EA2870011F194514C90ABEE528E.roa
File:                     19043EA2870011F194514C90ABEE528E.roa (raw, json)
Hash identifier:          BzBVaNtbVuS2bl3IWoMcduF0FYTSvfV6bKgxcVL+8hE=
Subject key identifier:   CD:37:CE:16:D1:D8:FE:B0:12:60:89:CC:BB:B3:77:13:59:B2:4B:52
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       144A
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/19043EA2870011F194514C90ABEE528E.roa
Signing time:             Thu 06 Aug 2026 17:33:59 +0000
ROA not before:           Thu 06 Aug 2026 17:33:59 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55430
IP address blocks:        27.125.128.0/18 maxlen: 24
                          39.109.128.0/17 maxlen: 24
                          58.96.192.0/18 maxlen: 24
                          101.127.0.0/17 maxlen: 24
                          101.127.128.0/18 maxlen: 24
                          101.127.240.0/21 maxlen: 24
                          103.17.146.0/24 maxlen: 24
                          182.19.128.0/17 maxlen: 24
                          182.55.0.0/16 maxlen: 24
                          183.90.0.0/17 maxlen: 24
                          2406:3003::/32 maxlen: 40
                          2406:3003::/40 maxlen: 48
                          2406:3003:1000::/40 maxlen: 48
                          2406:3003:2000::/40 maxlen: 48
                          2406:3003:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5194 (0x144a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug  6 17:33:59 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74c587-3ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:ae:de:c6:78:b5:2d:73:59:38:03:a4:aa:
                    d6:d5:72:a3:29:ca:e2:4b:23:9f:d9:bc:b4:48:0c:
                    77:7c:53:06:3d:96:32:0c:8a:1f:ee:b9:ef:76:17:
                    06:f6:5a:c1:ba:6c:d8:81:69:9a:16:c6:cd:02:89:
                    8b:99:a1:d7:3a:9d:be:4c:ec:77:20:43:50:26:b1:
                    04:31:2f:b8:ba:a1:e0:c4:a5:08:0d:ae:dc:ae:84:
                    99:b4:9e:25:06:d0:4c:53:54:2d:6d:71:04:4c:e1:
                    e1:4f:05:2c:3e:bb:7d:80:fe:a0:d6:a1:d3:68:f9:
                    4b:0b:85:45:ba:af:21:d6:76:37:32:9d:a5:ab:bc:
                    46:e5:b9:5d:81:11:b9:41:61:e5:53:00:86:72:7a:
                    87:af:89:f4:78:79:c1:58:59:af:6e:95:2e:9e:89:
                    ea:61:61:83:3b:8e:c7:dd:99:67:5c:23:d4:f6:3b:
                    b3:c0:f5:89:15:f0:0e:61:93:d6:a2:c3:73:7f:9b:
                    e6:aa:5d:7e:97:1d:a6:4d:67:64:61:17:89:bf:0a:
                    af:16:32:98:e5:0e:6c:7a:aa:8f:06:4f:ab:9e:bf:
                    4e:a7:d0:49:b0:f9:de:68:79:f4:e3:b7:f0:ff:a5:
                    f8:09:2d:e6:43:d4:0a:4b:a9:b6:7a:2c:89:2d:76:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:37:CE:16:D1:D8:FE:B0:12:60:89:CC:BB:B3:77:13:59:B2:4B:52
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/19043EA2870011F194514C90ABEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.125.128.0/18
                  39.109.128.0/17
                  58.96.192.0/18
                  101.127.0.0-101.127.191.255
                  101.127.240.0/21
                  103.17.146.0/24
                  182.19.128.0/17
                  182.55.0.0/16
                  183.90.0.0/17
                IPv6:
                  2406:3003::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:40:12:69:33:cc:b0:7e:7e:b3:2b:a6:b3:b5:78:40:27:a8:
         78:29:a3:bd:99:95:33:fd:02:a6:fa:1a:88:19:76:df:24:2d:
         42:61:87:b3:7d:a2:b6:19:ba:86:d8:9c:6b:41:73:89:f9:31:
         71:dc:25:08:d4:4e:40:01:23:d1:d7:b2:19:8c:ed:f8:9c:27:
         4b:d5:e5:34:a5:1c:de:94:55:ed:9f:a2:21:26:ce:e9:36:35:
         b3:80:8d:17:e1:04:59:09:56:27:de:26:93:3a:a9:ec:8b:25:
         e5:a0:28:cc:6d:8a:ad:9f:02:22:e7:ac:a4:95:f3:f5:cd:5c:
         87:e3:11:f5:87:07:c6:19:e9:04:8d:da:3d:09:1a:c3:e3:31:
         88:cc:2b:7c:65:0c:92:53:f9:ed:89:f5:b2:a6:0a:eb:69:54:
         0d:07:7b:45:fe:ab:7c:98:99:ac:0d:cb:20:23:fa:d3:cb:b1:
         c7:7b:65:4e:76:dc:b6:61:09:a0:9b:8f:0f:29:3c:39:5e:8a:
         62:14:28:62:80:6b:77:2b:68:08:74:a0:6a:9c:6e:eb:4e:07:
         bc:40:fd:a6:6f:6d:e5:0a:f8:c4:b3:e0:61:85:73:11:d2:d6:
         e7:2e:03:c7:b8:fe:95:6c:b4:e6:03:8f:ca:15:29:8a:46:a4:
         6a:7d:0c:e9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICFEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAyREMxMTAvBgNVBAUTKEMyQjlGNUYzQzY4QzU3NjcyNzIzOUI5MkE5M0IzNjI5
N0QxQjE2NTMwHhcNMjYwODA2MTczMzU5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc0YzU4Ny0zZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2miu3sZ4tS1zWTgDpKrW1XKjKcriSyOf2by0SAx3fFMGPZYyDIof7rnvdhcG
9lrBumzYgWmaFsbNAomLmaHXOp2+TOx3IENQJrEEMS+4uqHgxKUIDa7croSZtJ4l
BtBMU1QtbXEETOHhTwUsPrt9gP6g1qHTaPlLC4VFuq8h1nY3Mp2lq7xG5bldgRG5
QWHlUwCGcnqHr4n0eHnBWFmvbpUunonqYWGDO47H3ZlnXCPU9juzwPWJFfAOYZPW
osNzf5vmql1+lx2mTWdkYReJvwqvFjKY5Q5seqqPBk+rnr9Op9BJsPneaHn047fw
/6X4CS3mQ9QKS6m2eiyJLXZq+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM03zhbR
2P6wEmCJzLuzdxNZsktSMB8GA1UdIwQYMBaAFMK59fPGjFdnJyObkqk7Nil9GxZT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJEQy8yRDUxQUY0MkZE
M0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYyY25JNXVTcVRzMktYMGJG
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dybjE4OGFNVjJjbkk1dVNxVHMyS1gwYkZsTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDAyREMvMkQ1MUFGNDJGRDNFMTFFODg4QzUzOTQ0QzRGOUFFMDIvMTkwNDNFQTI4
NzAwMTFGMTk0NTE0QzkwQUJFRTUyOEUucm9hMGQGCCsGAQUFBwEHAQH/BFUwUzBC
BAIAATA8AwQGG32AAwQHJ22AAwQGOmDAMAsDAwBlfwMEBmV/gAMEA2V/8AMEAGcR
kgMEB7YTgAMDALY3AwQHt1oAMA0EAgACMAcDBQAkBjADMA0GCSqGSIb3DQEBCwUA
A4IBAQCuQBJpM8ywfn6zK6aztXhAJ6h4KaO9mZUz/QKm+hqIGXbfJC1CYYezfaK2
GbqG2JxrQXOJ+TFx3CUI1E5AASPR17IZjO34nCdL1eU0pRzelFXtn6IhJs7pNjWz
gI0X4QRZCVYn3iaTOqnsiyXloCjMbYqtnwIi56yklfP1zVyH4xH1hwfGGekEjdo9
CRrD4zGIzCt8ZQySU/ntifWypgrraVQNB3tF/qt8mJmsDcsgI/rTy7HHe2VOdty2
YQmgm48PKTw5XopiFChigGt3K2gIdKBqnG7rTge8QP2mb23lCvjEs+BhhXMR0tbn
LgPHuP6VbLTmA4/KFSmKRqRqfQzp
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:49:21 2026 by rpki-client